Product Security Expert

Your new role and environment.
We are looking for an experienced Product Security Expert to strengthen our Secure Software Development Lifecycle (SSDLC) and lead threat and risk modeling activities. In this role you will guide our engineering teams on techniques to support development pipelines, identify threats, and implement mitigations during the design process. Together with your team you will guide our Product teams to shape the future of retail, from a security perspective

Our Engineering Enablement Department has a purpose to accelerate our teams worldwide. We strive to provide teams with a set of tools and services to enable them to unlock their full potential. In short, we enable them to deliver quality customer value quickly and autonomously. The tools and services we provide are built with and for our engineering community, it is up to you and your team to ensure that- for all these tools, security standards are in place

Key Responsibilities Of Your Role.

• Facilitate threat modeling exercises and training sessions.
• Lead workshops and discussions with diverse stakeholders around Security topics.
• Collaborate with first-line teams to develop an optimal future state for our development pipelines, selecting the appropriate tools, decisions, and techniques.
• Advise on updating existing activities and implementing new technologies in our SSDLC.
• Identify security trends to train developers on recurring issues.
• Work with Product teams to architect secure products and features.
• Cultivate Security Champions within Product teams.
• Support teams in making security-conscious decisions without hindering development.

What's in it for you?
We ask a lot. (We're looking for the best, after all). But we offer a lot, too.

So, what do we have in store for you? We offer flexible hours and a hybrid working model, allowing you to work both from home and at the office. We provide competitive benefits to support health, well-being and your professional growth. This includes: a significant budget on benefit platform and a yearly bonus. At AD01 we welcome everyone, just the way you are, and encourage individual growth with valuable opportunities and a worldwide across-brand network.

Requirements.
Must have:

• Proficiency in threat and risk modeling, preferably with STRIDE assessments.
• At least 6 years of experience in one or more of the following areas: Software Development Lifecycle, Development Security, Security Engineering, Security Architecture, or Software Development.
• Experience in implementing and operating build automation and Cloud Security.
• Ability to facilitate workshops and provide subject matter expertise in security topics to diverse audiences.
• Knowledge of CI/CD Security.

Good to have:

• Familiarity with privacy threat modeling methods, such as LINDDUN.
• Background in development or DevSecOps.
• Experience with SAST/DAST/IAST/RASP solutions.

Desired Skills And Experience

• Experience in (and the ability to) identify and mitigate threats through effective threat and risk modelling.
• Experience in deploying and managing security technologies within the SSDLC (GitHub, Azure).
• Strong ability to communicate complex security concepts to various stakeholders.
• Passion for fostering a security-first culture within development teams.
• Innovative and creative approach to solving security challenges in fast-paced environments.

Apply now
If you're excited to help us grow, then please apply now. If you feel like you might
not
tick all the boxes but have the skills and personality we're looking for, then please also apply now

Got questions? Don't be shy. Madalina Ghitulescu at , has answers.

For us, diversity means being inclusive of thoughts and skills, generational differences, LGBTQ+, gender, race and ethnicity, disabilities, nationalities and more. We accept everyone for who they are.